CVE-2011-5268 Denial of service in n/a

Medium 4.3 Published 24 Dec 2013 Updated 7 Aug 2024

Remote attackers can cause a denial of service in Bip IRC proxy by triggering file descriptor exhaustion through multiple failed SSL handshakes.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2011-5268?

CVE-2011-5268 is a medium-severity denial of service vulnerability in Fedoraproject Fedora, published on 24 Dec 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

connection.c in Bip before 0.8.9 does not properly close sockets, which allows remote attackers to cause a denial of service (file descriptor consumption and crash) via multiple failed SSL handshakes, a different vulnerability than CVE-2013-4550. NOTE: this issue was SPLIT from CVE-2013-4550 because it is a different type of issue.

Weakness: CWE-310

Which versions are affected by CVE-2011-5268?

It affects 2 products.

Products include Duckcorp Bip, Fedoraproject Fedora.

How do I fix CVE-2011-5268?

Upgrade to a fixed version.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2011-5268 being exploited?

There is no known exploitation of CVE-2011-5268 in the wild and no public exploit code.

All Fedoraproject Fedora vulnerabilities

Sources

Also known as DEBIAN-CVE-2011-5268, GHSA-w599-7m7q-hvh9.